$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144849.roa File: AS144849.roa (raw, json) Hash identifier: 1En5RpO+994vU+cpTNVi7kwT9EaLszeb4F/UWLYtIy8= Subject key identifier: EB:07:88:3F:D2:34:07:7A:C0:6B:8F:C4:D3:E3:5B:DD:69:B3:5E:2A Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2F5A44B4C2B631C2CED72C25C1B2BA953C4449EA Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144849.roa Signing time: Wed 04 Mar 2026 06:19:33 +0000 ROA not before: Wed 04 Mar 2026 06:14:33 +0000 ROA not after: Wed 03 Mar 2027 06:19:33 +0000 asID: 144849 IP address blocks: 240a:a897::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:5a:44:b4:c2:b6:31:c2:ce:d7:2c:25:c1:b2:ba:95:3c:44:49:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:14:33 2026 GMT Not After : Mar 3 06:19:33 2027 GMT Subject: CN=EB07883FD234077AC06B8FC4D3E35BDD69B35E2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:51:da:0c:a7:48:1e:e8:1d:26:c5:f5:e2:fc: 68:73:60:d9:ba:b0:60:ad:62:92:6a:1c:3a:fa:cb: e2:ae:45:d7:f3:10:92:cf:25:df:45:8c:39:8c:50: de:c6:51:50:c9:2e:4f:4b:8c:b6:ad:8c:6a:b2:9d: 3d:e4:a6:6b:d3:aa:20:9d:c9:0f:1d:06:a2:65:c1: d5:f3:4d:b9:08:0c:7f:64:12:e1:f1:40:af:ea:94: 8e:8a:f8:63:25:2f:49:59:af:d3:8e:6a:15:75:71: 5f:bb:37:84:7e:e0:94:8a:76:72:1e:68:02:e7:46: cc:53:a9:a9:5b:ff:92:47:35:c3:1e:5e:45:d0:86: 32:b3:1e:88:2b:55:46:a7:8c:48:fe:3b:f0:70:cb: 84:cf:c5:9f:5c:21:03:8d:59:9c:50:06:b0:bb:bf: bf:96:1f:c1:ed:0b:b1:4b:63:33:62:72:1d:60:15: e0:e1:d4:e5:74:ef:83:8f:f1:08:54:1c:2c:6d:cf: 5f:c6:2c:7e:99:05:b3:9c:33:dd:29:3c:0b:f2:3d: 78:10:6c:6f:22:2f:07:0f:59:32:1b:d7:ed:06:c8: f6:21:5f:f3:d5:94:1e:3c:59:b2:fb:25:41:48:b1: e8:38:31:85:f2:51:b8:c8:c6:98:06:c9:ae:7c:12: 07:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:07:88:3F:D2:34:07:7A:C0:6B:8F:C4:D3:E3:5B:DD:69:B3:5E:2A X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144849.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a897::/32 Signature Algorithm: sha256WithRSAEncryption 5d:c9:46:c9:97:5d:17:2c:e6:57:f8:49:88:d0:b0:b6:2c:21: 13:13:a1:7e:7a:c6:dc:a6:1d:cd:7a:af:b8:4e:8c:8a:74:d3: ea:68:09:b8:e6:4a:f4:ac:8d:0b:9d:cc:67:d2:91:f3:49:f6: aa:65:86:dc:e3:e6:7d:56:d1:dd:4f:31:90:e0:ae:e5:b7:a3: 16:90:c9:a4:76:35:8e:ff:d4:22:36:27:41:40:23:e7:9d:ad: 3c:63:5f:af:23:7c:f7:cd:9a:8c:15:26:2b:d2:d7:a2:e1:4d: 4e:eb:54:82:e1:b4:70:33:da:44:bc:65:04:64:c5:c8:b5:53: 84:db:6b:12:6b:bc:88:02:31:f8:de:57:e9:3f:9c:5c:0d:73: 75:46:ee:58:5c:df:3d:c8:c2:79:6c:f0:e7:aa:3b:e6:c9:bd: b1:49:47:7f:1f:f2:5d:6c:86:4e:0d:9c:0f:55:10:91:51:77: 24:ab:03:4a:74:47:a2:0e:2f:a2:05:63:05:6e:1b:6a:27:36: 94:48:9e:4f:ce:c8:14:ac:cc:c1:7e:b7:29:c3:24:c0:c9:3b: b2:5f:c8:50:a4:f8:63:98:6a:a5:ac:45:36:24:9d:be:ff:45: b1:74:b9:4a:a3:22:41:6e:4c:73:e2:56:ed:ff:57:04:a9:00: 9a:a1:98:1b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUL1pEtMK2McLO1ywlwbK6lTxESeowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTQzM1oX DTI3MDMwMzA2MTkzM1owMzExMC8GA1UEAxMoRUIwNzg4M0ZEMjM0MDc3QUMwNkI4 RkM0RDNFMzVCREQ2OUIzNUUyQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANNR2gynSB7oHSbF9eL8aHNg2bqwYK1ikmocOvrL4q5F1/MQks8l30WMOYxQ 3sZRUMkuT0uMtq2MarKdPeSma9OqIJ3JDx0GomXB1fNNuQgMf2QS4fFAr+qUjor4 YyUvSVmv045qFXVxX7s3hH7glIp2ch5oAudGzFOpqVv/kkc1wx5eRdCGMrMeiCtV RqeMSP478HDLhM/Fn1whA41ZnFAGsLu/v5Yfwe0LsUtjM2JyHWAV4OHU5XTvg4/x CFQcLG3PX8YsfpkFs5wz3Sk8C/I9eBBsbyIvBw9ZMhvX7QbI9iFf89WUHjxZsvsl QUix6DgxhfJRuMjGmAbJrnwSB2sCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBTrB4g/ 0jQHesBrj8TT41vdabNeKjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDg0OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qJcwDQYJKoZIhvcNAQELBQADggEBAF3JRsmXXRcs5lf4SYjQsLYsIRMToX56xtym Hc16r7hOjIp00+poCbjmSvSsjQudzGfSkfNJ9qplhtzj5n1W0d1PMZDgruW3oxaQ yaR2NY7/1CI2J0FAI+edrTxjX68jfPfNmowVJivS16LhTU7rVILhtHAz2kS8ZQRk xci1U4TbaxJrvIgCMfjeV+k/nFwNc3VG7lhc3z3Iwnls8OeqO+bJvbFJR38f8l1s hk4NnA9VEJFRdySrA0p0R6IOL6IFYwVuG2onNpRInk/OyBSszMF+tynDJMDJO7Jf yFCk+GOYaqWsRTYknb7/RbF0uUqjIkFuTHPiVu3/VwSpAJqhmBs= -----END CERTIFICATE-----Generated at Sat Mar 28 13:15:17 2026 by rpki-client